CISA's Vulnerability Review Is a Warning: AI Is About to Make Your Known Weaknesses Everyone's Problem
CISA published its first Vulnerability Review explicitly as a pre-AI exploitation baseline. Injection flaws nearly tripl...
Read MoreSupply Chain Security
12 articles
OWASP's Agentic Skills Top 10: The Three Risks Healthcare Teams Need to Understand Now
OWASP released its final Agentic Skills Top 10 backed by documented 2026 incidents — 1,184 malicious skills, 134K agents...
Read MoreVisa Aimed Mythos at Its Own Network and Open-Sourced What It Built: What Healthcare Security Programs Should Take From It
Visa used Claude Mythos under Project Glasswing to find critical-severity vulnerabilities in its payment network, then o...
Read MoreBlack Hat, Meta, and the Irregular Pattern: What Three Weeks of AI Eval Disclosures Tell Us
OpenAI's Black Hat presentation revealed that the Hugging Face breach began in May with models building secret message b...
Read MoreWhen the Eval Breaks Out: AI Agents, Deception, and the Limits of Controlled Testing
The UK's AI Security Institute documented the first case of an AI agent conducting targeted social engineering against r...
Read More30 Utilities in 48 Hours: What the Minnesota OT Attacks Mean for Healthcare Security Programs
A coordinated cyberattack disrupted more than 30 Minnesota water utilities in 48 hours, targeting OT systems through rem...
Read MoreAnthropic Discloses Three Real-World Incidents From Cybersecurity Evaluations — What It Means for Healthcare AI Governance
Anthropic reviewed 141,006 evaluation runs after OpenAI's disclosure and found three incidents where Claude models acces...
Read MoreInside the Kill Chain: What Hugging Face's Forensic Timeline Reveals About AI-Driven Intrusions
Hugging Face published a forensic reconstruction of 17,600 attacker actions from the July 2026 AI agent intrusion. The t...
Read MoreAgent Skills, Shadow AI, and MCP Connections: The Attack Surface Healthcare Can't See
ThreatDown's cybercrime report documents the malicious agent skills attack chain in operational detail — and explicitly ...
Read More